How do I hide the URL?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a password ASP page using VBsSCRIPT which, when logged in, redirects
to a "Default.htm" page. However, one can type in the URL and add the
"Default.htm" at the end to "backdoor" into the site without a password.

How do I make it so that adding the "Default.htm" will not allow immediate
access to the website, bypassing the login?
 
Make it default.asp and test for a variable that is only created/assigned when the user has logged
in.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================
 
That makes sense; however, I borrowed the VBSCRIPT from someone else and have
no idea how toadd the test for a variable.
 
Then maybe you should either hire someone to do it for you, or hit the books
/ web for instruction.

Bob Lehmann
 
In the login script before redirecting add a session variable for successful log in
<%
Session("Authenticated") = 1
Response.Redirect "Default.asp"
%>

In your pages add a check for the authentication
<%
If Session("Authenticated") = 0 Then
Response.Redirect "YourLoginPage.asp"
End If
%>

All pages must be .asp (not .htm)



| That makes sense; however, I borrowed the VBSCRIPT from someone else and have
| no idea how toadd the test for a variable.
|
| "Thomas A. Rowe" wrote:
|
| > Make it default.asp and test for a variable that is only created/assigned when the user has logged
| > in.
| >
| > --
| > ==============================================
| > Thomas A. Rowe (Microsoft MVP - FrontPage)
| > WEBMASTER Resources(tm)
| >
| > FrontPage Resources, WebCircle, MS KB Quick Links, etc.
| > ==============================================
| > To assist you in getting the best answers for FrontPage support see:
| > http://www.net-sites.com/sitebuilder/newsgroups.asp
| >
| > | > >I have a password ASP page using VBsSCRIPT which, when logged in, redirects
| > > to a "Default.htm" page. However, one can type in the URL and add the
| > > "Default.htm" at the end to "backdoor" into the site without a password.
| > >
| > > How do I make it so that adding the "Default.htm" will not allow immediate
| > > access to the website, bypassing the login?
| >
| >
| >
 
Back
Top